Dione Protocol / OdysseyBridgeS
Hacken reviewed Dione Protocol (Dione Protocol / OdysseyBridgeS) on 21 Oct 2024: 25 findings, 1 critical; 24 marked fixed, 1 open.
Report hosted on hacken.io.
Trustblock does not review code.
Findings25
Statuses are the security firm’s own, from its report.
| Severity | Open | Acknowledged | Fixed |
|---|---|---|---|
| Critical | 0 | 0 | 1 |
| High | 0 | 0 | 2 |
| Medium | 0 | 0 | 1 |
| Low | 1 | 0 | 20 |
CriticalThe wmbReceive's Mint Does Not Update _balances ArrayFixed
The report gives no description here.
HighInconsistent and Ambiguous Application of FeesFixed
The report gives no description here.
HighThe rescueTokens Function Can Break Bridge AccountingFixed
The report gives no description here.
MediumThe transferFrom Does Not Check Allowance For Applied FeeFixed
The report gives no description here.
LowAccessControlDefaultAdminRulesUpgradeable is not usedFixed
The report gives no description here.
LowDioneBridge Implementation Is Not DisabledFixed
The report gives no description here.
LowExcessive Amount of Native Tokens Are Collected By The ProtocolFixed
The report gives no description here.
LowFee-On-Transfer Is Applied On Top Of The Transferred AmountFixed
The report gives no description here.
LowFloating PragmaFixed
The report gives no description here.
LowGaps in DioneBridge Contract Are RedundantFixed
The report gives no description here.
Show 10 more
LowInconsistent Application of Access Control For Tokens BurnFixed
The report gives no description here.
LowIncorrect Fee Validation in setFee() Function Allows Excessive Fees and Prevents ReductionFixed
The report gives no description here.
LowLack of Two-Step Ownership Transfer PatternFixed
The report gives no description here.
LowMissing Events For Key ActionsFixed
The report gives no description here.
LowMissing Parameters Validation in Constructor and Set FunctionsFixed
The report gives no description here.
LowNo Minimum Deposit and Redeem Value DefinedFixed
The report gives no description here.
LowThe _dispatchMessageBatch Function Is Not UsedFixed
The report gives no description here.
LowThe checkAndSendFees Function Can Trigger Multiple RedeemsFixed
The report gives no description here.
LowThe dispatchMessage Can Revert Due To Too Large Fee ProvidedFixed
The report gives no description here.
LowThe transferFrom Can Emit Inaccurate Information In Transfer EventFixed
The report gives no description here.
Show 4 more
LowThe wmbReceive Function Can Revert Due To Gas OverconsumptionFixed
The report gives no description here.
LowUSDC Blacklisting Feature Can Prevent Token TransferFixed
The report gives no description here.
LowUse of Transfer Instead of Call To Send Native TokensFixed
The report gives no description here.
LowWDIONEBridged Lakcs Native Token Withdraw MechanismFixed
The report gives no description here.
Contracts in scope1
| Address | Chain | Source code |
|---|---|---|
| 0x65278f702019078e9ab196c0da0a6ee55e7248b7 | Chain: Ethereum | Source code: Verified source |
Part of Dione Protocol’s security record
Dione ProtocolSecurity firm
Hacken343 projects reviewed · 476 reports · latest Sep 2026
See Hacken’s auditsSomething wrong on this page? A missing report, a wrong date, a finding that was fixed since. Tell us and we check it against its source.
Tell us